Zend
200-710 · Question #229
Which of these approaches is recommended to protect a web site against Cross-Site Request Forgery (CSRF)?
The correct answer is B. Add an additional token to the HTTP request. See the full explanation below for the reasoning.
Security
Question
Which of these approaches is recommended to protect a web site against Cross-Site Request Forgery (CSRF)?
Options
- AUse POST instead of GET
- BAdd an additional token to the HTTP request
- CDisable sessions
- DValidate the IP address of the user
How the community answered
(65 responses)- A15% (10)
- B75% (49)
- C3% (2)
- D6% (4)
Topics
#CSRF#CSRF token#security headers#web security
Community Discussion
No community discussion yet for this question.